General
- Target 2026-07-02_1456cef2fa39df345f9c88c135a6cbe1_amadey_blankgrabber_darkgate_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 58.3MB
- Sample260702-hdzcksbw9n
- SHA256 0260ebfb94b6b9e8b3e1d7139a3a422811da8d955a89a68f8ce38c0f3283deb3
- MD5 1456cef2fa39df345f9c88c135a6cbe1
- SHA1 5676582df8136b162a4a29bd212937dd3ff71c2f
- SHA512 f13710c7dcda92b76416f435b06bf223d4409d50d987937f2ebddad5f3b97811cb88703051c79b9274339610c4a6729d919f95d43e24bbcfa380e15ccc849e2e
- SSDEEP 1572864:pmDscMQwx0F2JZUO6qvuavl/hYQs2Ntyf:7cMQwSxq2avzvsLf
- TLSH T128D73332B5C29476C4278270593DEBA767BC9BB01B2494CBD3702A9D5C266C0EE37637
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-02_1456cef2fa39df345f9c88c135a6cbe1_amadey_blankgrabber_darkgate_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_1456cef2fa39df345f9c88c135a6cbe1_amadey_blankgrabber_darkgate_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_1456cef2fa39df345f9c88c135a6cbe1_amadey_blankgrabber_darkgate_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 58.3MB
- SHA256 0260ebfb94b6b9e8b3e1d7139a3a422811da8d955a89a68f8ce38c0f3283deb3
- MD5 1456cef2fa39df345f9c88c135a6cbe1
- SHA1 5676582df8136b162a4a29bd212937dd3ff71c2f
- SHA512 f13710c7dcda92b76416f435b06bf223d4409d50d987937f2ebddad5f3b97811cb88703051c79b9274339610c4a6729d919f95d43e24bbcfa380e15ccc849e2e
- SSDEEP 1572864:pmDscMQwx0F2JZUO6qvuavl/hYQs2Ntyf:7cMQwSxq2avzvsLf
- TLSH T128D73332B5C29476C4278270593DEBA767BC9BB01B2494CBD3702A9D5C266C0EE37637
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.